OpenStack

Fastback Investors

"Matrix: Stan Reiss Foundation Capital: Rich Redelfs Harmony Partners: Greg Eaton Juniper: Vince Molinaro Granite: Eric Zimitz

Open-Stack Related Business Sales

$1.6Bn by 2016 (451 Research)

MANO VNF Manager

- Connected to VNF and EMS. - lifecycle management of VNF instances - overall coordination and adaptation role for configuration and event reporting between NFVI and the E/NMS

MANO NFV Orchestrator

- Interfaces with OSS/BSS - on-boarding of new Network Service (NS); VNF-FG and VNF Packages - NS lifecycle management (including instantiation; scale-out/in; performance measurements; event correlation; termination) - global resource management; validation and authorization of NFVI resource requests - policy management for NS instances

Virtualised Infrastructure Manager (VIM)

- controlling and managing the NFVI compute; storage and network resources; within one operator's infrastructure sub-domain - collection and forwarding of performance measurements and events

Max number of VXLAN segments

16M

VXLAN Identifier

24-bit segment ID called VNI (VXLAN Network Identifier)

% of providers deploying NFV this year

35%, according to Infonetics. for Service agility and new revenue, operational efficiencies and capex savings."

Vodafone's head of NFV

6/25/2015 David Amzallag, a former Alcatel-Lucent and Amdocs executive who has specialized in NFV developments, to head up its group-wide network virtualization strategy. Amzallag, who was part of the CloudBand NFV infrastructure (NFVi) team at Alcatel-Lucent (NYSE: ALU) until late 2014, has been appointed as head of network virtualization, SDN and NFV with responsibility for developing a next-generation technology and transformation strategy for all of Vodafone's operating units across more than 25 countries in Europe, Africa and Asia.

Nova Compute

A Compute node creates, manages, and terminates virtual machine instances. It is the software that controls your Infrastructure as as Service (IaaS) cloud computing platform. It is similar in scope to Amazon EC2 and Rackspace Cloud Servers. Nova does not include any virtualization software, rather it defines drivers that interact with underlying virtualization mechanisms that run on your host operating system, and exposes functionality over a web API. The Nova driver embeds a tiny HTTP client which talks with the Docker internal Rest API through a unix socket. It uses the HTTP API to control containers and fetch information about them. The driver will fetch images from the OpenStack Image Service (Glance) and load them into the Docker filesystem. Images may be placed in Glance by exporting them from Docker using the 'docker save' command.

AS = Autonomous System

A collection of connected Internet Protocol (IP) routing prefixes under the control of one or more network operators on behalf of a single administrative entity or domain that presents a common

Telemetry - MongoDB

A feature-complete and recommended database for storage of metering data from OpenStack Telemetry (Ceilometer).

Kubernetes Service

A group of pods that work together. The service acts as a load balancer in front of a group of containers / pods

Swift

A highly available, distributed, eventually consistent object/blob store. Can be used by Glance as an image store.

iBGP peering

All iBGP speakers must peer directly with every other iBGP speaker in an AS

EBS

Amazon block store. Can be mounted by EC2 instances.

VPC

Amazon virtual private cloud

Cinder

Block Storage resource. Can use either LVM or Ceph RBD as the storage backend

Storage - Ceph

Ceph RADOS Block Device storage can be configured to provide storage for block volumes (Cinder), images (Glance) and ephemeral instance storage (Nova). It can also provide object storage through the S3 and Swift API.

Ceph

Ceph provides a shared backend for Glance images, Nova and Cinder volumes, and Swift objects, as well as copy-on-write between them in some cases.

Storage - Cinder

Cinder provides scheduling of block storage resources, typically delivered over iSCSI and other compatible backend storage systems. Block storage can be used for database storage, expandable file systems, or to provide a server with access to raw block level devices.

Appcito: Elastic Load Balancing

Cloud Application Security; Application Analytics. Partnered with Pluribus

Trove

Cloud Database as a Service provisioning for both relational and non-relational database engine

Openstack Jenkins

Continuous Development (CD) and Continuous Integration (CI) tool for OpenStack

Fedora OpenStack

Currently on Juno. Kilo will be released 10/27 with Fedora 23.

DPDK

Data Plane Development Kit: A set of libraries and drivers for fast packet processing.

DMZ

Demarcation Zone. Shared network between the ASs.

Chris Clason

Director of Architecture at Mirantis SE Background Was Principal Solutions Architect and West Coast SE Manager until June of this year.

LAG N

Distributes traffic across all links evenly

iBGP connectivity

Doesn't have to be directly connected to BGP peer. Doesn't pass networks learned from other iBGP speaker.

EC2

Elastic Compute Cloud

Appcito Products

Elastic Load Balancing; Cloud Application Security Application Analytics. Partnered with Pluribus

Kubernetes Controller

Enforces declarations: How many pods are running at a time. Too many or too few containers.

NVP Controller Cluster

Exposes RESTful API to define virtual networks.

EGP

Exterior Gateway Protocol: Generic term for inter-AS routing. BGP.

Fuel

Fuel is the Openstack installer. Nailgun is the heart of fuel and coordinates everything else.

6 core OpenStack services

Glance Nova Neutron Cinder Swift Keystone

Glance

Glance image services include discovering, registering, and retrieving virtual machine images. Can use either Swift or Ceph RBD as the storage backend. Glance has a RESTful API that allows querying of VM image metadata as well as retrieval of the actual image.

Mirantis Competing OpenStack Distributions

HP and RedHat

Heat

Heat is the main project in the OpenStack Orchestration program. A heat template describes the infrastructure in a cloud application servers; floating ips; volumes; security groups; users; etc.

Reasons for VXLAN

Inadequate table size; limitations of STP (link waste); Multitenancy-location independent addressing & VLAN # limit

Openstack Controller

Initiates orchestration activities and provides an external API. Other components like Glance (image storage), Keystone (identity management), Horizon (OpenStack dashboard) and Nova-Scheduler are installed on the controller as well.

IGP

Interior Gateway Protocol: Generic term for intra-AS routing

Mirantis Investments

January 2013, $10 million total from Dell Ventures, Intel Capital and West Summit Capital, June 2013 $10 million from Red Hat, Ericsson and SAP Ventures. October 2014 $100 million Series B led by Insight Venture Partners, joined by existing Intel Capital, West Summit Capital, Ericsson and Sapphire Ventures with the stated goal of scaling up engineering to increase OpenStack contributions and prepare for a 2016 IPO. August 2015: $100 million Series C, led by Intel Capital. Added August Capital

Difference between QEMU and KVM

KVM schedules the hardware resources, QEMU emulates the hardware for the guest OS.

Kubernetes Labels

Key / value pairs that describes the environment and application the API can use.

Kubernetes

Kubernetes is an open source orchestration system by Google for Docker containers. It handles scheduling onto nodes in a compute cluster and actively manages workloads to ensure that their state matches the users declared intentions. Using the concepts of "labels" and "pods", it groups the containers which make up an application into logical units for easy management and discovery. Inspired by Borg, an internal architecture on which Kubernetes was built.

What is VXLAN

Layer 2 overlay on a layer 3 network. Each overlay is a VXLAN segment

LACP

Link Aggregation Control Protocol used for LAG P2P comms

Rally

Load testing tool for OpenStack

MANO

MANagement and Orchestration. According to ETSI NFV ISG (Industry Specification Group); the MANO function is responsible for deploying and connecting hosted elements or virtual network functions. 3 components: NFV Orchestrator, VNF Manager, Virtualized Infrastructure Manager (VIM)

VXLAN Broadcast

Mapping between Virtual Network Identifier (VNI) and multicast IP address distributed via management channel

MC-LAG

Multi Chassis Link Aggregation.

VXLAN--how is dest found

Multicast flooding

Kubernetes Pods

Multiple containers that have similar functions. Reusable libraries. Eg: Content server & data store. Put them together.

eBGP connectivity

Must be directly connected to BGP peer

LAG N+N

N active; with N standby. If any active fail; they all fail and standby are used.

Nicira products

NVP: Nicira Virtualization Platorm; OVS: Open vSwitch; NVP Controller Cluster

NFVI

Network Function Virtualization Infrastructure: Compute; Storage; Network

VMWare NSX

Network virtualization platform for the Software-Defined Data Center (SDDC). Built from Nicira acquisiton.

OPNFV

OPNFV: focused on the NFVI and VIM portions of the overall solution. Their latest release is Arno. Arno is a developer-focused release aimed at those who are exploring NFV for proofs-of-concept, developing Virtual Network Functions (VNF) applications and or interested in performance and use case-based testing.

SR-IOV

One or more PCIe Virtual Functions (VFs). Each VF is associated with the device's PF. Each PF/VF is assigned a unique PCI Express Requester ID (RID) that allows I/O memory management unit (IOMMU) to differentiate between different streams and apply memory and interrupt translations between the PF and VFs. Bypasses the virtual switch.

Nova

OpenStack Compute

Neutron

OpenStack Network

Pacemaker

Pacemaker: Watchdog that keeps all of the services running on the controller. If a service on one controller fails, it starts it on another controller.

The Fabric Portfolio

Perspica: Analytics. Dan Maloney is new CEO. Hasn't responded.

Craig Peters

Product Manager at Mirantis. Was also at HGST and Y!. Did a video on Kubernetes with Gosha, Video with Kit Merker Product Manager from Google on Kubernetes. Showed Grafana and InfluxDB running together in a pod. Service had gateways that connected to pods. Reasons for containers: portability, isolation, easier to deploy.

PA space

Provider aggregatable space. Block of IP addresses that are associated to the provider.

PI space

Provider-independent address space. Owner must contact service provider for routing

Ceilometer

Provides metering and monitoring of an OpenStack cloud.

Different network types

Public Private Storage PXE / Fuel Management

Kubernetes Selector

Query against labels. Used by other pods or external interfaces.

RIR

Regional Internet Registries. RIPE=Europe; ARIN=Americas; AfriNIC; APNIC for APAC; LACNIC for LATAM & Caribbean

OpenStack Liberty Presenters

Rudy McComb Nick Chase

Nathan Trueblood

Senior Director Product Management at Mirantis. Founding member of HGST business unit focused on cloud, cold storage and software-defined storage solutions * Launched industry's first large-scale deployment of Hadoop 2.0 (release .23) at Yahoo * EMC cloud archiving, information governance, cloud storage expert * Development of the first commercial .NET-based grid computing product (winning Microsoft ISV Partner of the Year)

STT

Stateless Transport Tunneling. Uses TCP header to leverage Transmit Segmentation Offload (TSO) RX uses GRO. Does not specify how to find receiver.

Murano

The Murano Project introduces an application catalog to OpenStack; enabling application developers and cloud administrators to publish various cloud-ready applications in a browsable categorized catalog. APIs for Jenkins / Team City. Snapshots on errors.

Sahara

The Sahara project provides a simple means to provision a data-intensive application cluster (Hadoop or Spark) on top of OpenStack.

TNC IF-MAP

The Trusted Network Connect Working Group (TNC-WG) has defined an open solution architecture that enables network operators to enforce policies regarding the security state of endpoints in order to determine whether to grant access to a requested network infrastructure. Part of the TNC architecture is IF-MAP, a standard interface between the Metadata Access Point and other elements of the TNC architecture. This document defines and specifies IF-MAP Metadata for Network Security.

NUMA

The boundary between banks of memory dedicated to physically separate processors

Founding date and founders of Mirantis

The company was founded in 1999 by Alex Freedland and Boris Renski

OpenDaylight Functions

Topology Manager Statistics Manager Switch Manager Forwarding Rules Manager Inventory Manager (Switches and ports) Host Tracker

TRILL

Transparent Interconnection of Lots of Links. IS-IS. Xport hdr w/ hop cnt

Puppet and Chef

Two different tolls that make it easier to roll out VM updates.

Mirantis Partners

Ubuntu: Canonical for commercial support RedHat stopped working with Mirantis in November 2014. Since July 2014 Oracle for support of Oracle Linux and Oracle VM

Ilya Elterman

VP of Engineering, Upstream OpenStack at Mirantis. Was CTO at Selectosa Systems, rising from team lead in 2003. Published "Evolving Hadoop for the Data Society"

Roman Alekseenkov

VP of Engineering, worked on some consulting projects wtih Cisco. With Mirantis since 2006. Came from Selectosa Systems, which was founded by Boris Renski

HP Offerings

VSR1000: Virtual Services router. Includes WAN Accel, Caching, SBC. Running 38 different POCs with carriers around the world. 9 are ETSI NFV ISG-accepted PoCs. ContextStream (ContextNet is core product

VXLAN Operation

VTEP stores source MAC/IP relation.

VTEP

VXLAN Tunnel Endpoint.

VXLAN stands for

Virtual Extensible LAN

Top NFV use cases

Virtual enterprise CPE (vE-CPE), service chaining and virtual network platform as a service (VNPaaS)

DirectIO

Virtualization standard for network & disk device drivers where guest's device driver "knows" it is running in a virtual environment and cooperates with the hypervisor enabling enables guests high performance network and disk operations.

Ronen Kofman

Worked at Intel from 99 to 2008. They moved him to Oregon. Went to MIT Sloan School of Business for his MBA, VMWare for 1 year, Oracle for 3.5 years. Been at Mirantis for 1 year.

Nicira Open vSwitch

Works either in hypervisor or as standalone NVP GW.

OpenStack Governance

board of directors, technical committee user committee Project Team Leads (PTLs) are elected twice per year to match up with the two release cycles per year.

Reasons enterprises deploy openstack

greater operational efficiency, ability to innovate, and cost savings.